Method for synchronization of a controller

Abstract

A system and method for reintegration of a redundant controller after occurrence of a fault is provided, comprising synchronizing outputs of a primary controller with outputs of secondary controllers. The controller is placed in a different mode of operation in which its output is not used in system control. A meta-controller is activated to drive the primary controller to the same states at which the secondary or redundant controllers operate. A voting mechanism is used to determine a fault in an output to a controlled device. Control of the device using the secondary outputs is effected. The primary controller recalculates the primary output, based upon the primary output; a feedback signal; and, the secondary outputs. Control using the primary output is permitted when the primary output is within an allowable range of the secondary outputs.

Description

TECHNICAL FIELD[0001]This invention pertains generally to control systems, and more specifically to a method for controller fault recovery.BACKGROUND OF THE INVENTION[0002]Safety-critical control systems are increasingly being required, especially with the introduction of full by-wire braking and steering systems in vehicles. These systems need to be robust to controller faults wherein an error may result in loss of a critical vehicle function. Errors may be due to controllers that have temporary faults, or have been reset (e.g., due to a temporary power supply fault), or have drifted out of alignment because of a chaotic system, or wherein different sensor information has been caused by glitches at an input, or wherein there are temporary internal errors due to electromagnetic radiation in memory causing a state to be misrepresented.[0003]One main requirement of these systems is to ensure no single point of failure exists, and as such multiple controllers and actuators are typicall...

AI Technical Summary

Benefits of technology

The present invention provides a method for controller reintegration by synchronizing the output of the primary controller with outputs of secondary controllers without active intervention of other redundant controllers. This invention allows for a seamless and simple manner of reintegrating a controller. The method includes a voting mechanism that determines the output based upon feedback from the controlled device, the primary controller, and the secondary controllers. The voting mechanism can be embedded in each controller or a separate controller. The method can be executed when a fault occurs in the primary controller and allows for control with the secondary controllers. The invention offers a fault-tolerant control system and method that ensures smooth operation of the controlled device.

Problems solved by technology

Errors may be due to controllers that have temporary faults, or have been reset (e.g., due to a temporary power supply fault), or have drifted out of alignment because of a chaotic system, or wherein different sensor information has been caused by glitches at an input, or wherein there are temporary internal errors due to electromagnetic radiation in memory causing a state to be misrepresented.

This may leave the system operating without sufficient fault-tolerance, even when the faults have subsided.

This may not be an effective solution for cost-constrained systems, including automotive applications.

This problem is especially important since studies have shown that transient faults are likely to occur 5 to 100 times more frequently than permanent faults.

However, such systems require additional hardware, focus on transient memory faults, and are not efficient in managing transient faults that temporarily cause an entire controller to reset.

Additional communication overheads are required to transmit the controller state information that may introduce bus or communication errors.

The controllers need to be transitioned to a different mode to transmit this information which may trigger faults in the remaining working controllers at a time when correct operation is critical.

Images